installed module securelogin
installed module auth_ssl_redirect
installed module hsts to prevent HTTPS stripping attacks